微软发布 MXC：跨平台 AI Agent 容器沙箱
Microsoft Execution Containers 用统一 JSON 配置和 SDK 限制 Agent 可访问的文件、网络与系统资源，权限在 Agent 之外强制，Copilot、Codex、Replit 已支持。
Microsoft has launched a new container system for AI agents across Windows, Linux and macOS. It’s called Microsoft Execution Containers, or MXC, and it lets developers control which files, networks and system resources an agent can access. An agent can edit your project and run its tools while being blocked from personal files or changing configurations it only needs to read. These restrictions are enforced outside the agent’s control, so it can’t grant itself extra permissions. MXC uses platform-specific sandboxes, including Bubblewrap on Linux, through a unified JSON configuration and SDK. GitHub Copilot, OpenAI Codex, Replit and OpenClaw already support it, with Claude Code support planned. Source: https://blogs.windows.com/windowsdeveloper/2026/10/07/microsoft-execution-containers-policy-driven-containment-for-ai-agents/